[session] move security constant out of the class There is no reason for it to not be global. This will ease it use by ``Transaction object``.

from yams.buildobjs import RelationDefinition

class ARelation(RelationDefinition):
    subject = 'CWUser'
    object = 'CWGroup'